PT-2025-43552 · Frontier Airlines · Frontier Airlines Website

Yuriy Kuzma · Published 2025-10-23 · Updated 2025-12-31 · CVE-2025-62236

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Frontier Airlines website (affected versions not specified)

Description The Frontier Airlines website has a publicly available endpoint that allows validation of whether an email address is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, potentially aiding in further attacks. The vulnerable API endpoint is used for email address validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2025-62236

Affected Products

Frontier Airlines Website

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62236 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-62236 · Security Note
• https://twitter.com/CVEnew/status/1981444843395305667 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-296-01.json · Note
• https://t.me/CVEtracker/35611 · Telegram Post
• https://t.me/cveNotify/147274 · Telegram Post